Ujsoftware

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Ujsoftware records in CISA KEV

No Ujsoftware vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Owm Weather 2 records HIGH

Records

2 records in Owm Weather · all components

TI-2022-03460 CVE-2022-3769 · GHSA-p9v5-43w4-jhw3

OWM Weather < 5.6.9 - Contributor+ SQLi

HIGH 73

The OWM Weather WordPress plugin before 5.6.9 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by users with a role as low as contributor

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01172 Published 2022-11-28 Fixed in 5.6.9

TI-2022-23383 CVE-2022-47179 · GHSA-c436-fpwp-rwfj

WordPress OWM Weather Plugin <= 5.6.11 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 20

Cross-Site Request Forgery (CSRF) vulnerability in Uwe Jacobs OWM Weather plugin <= 5.6.11 leads to post duplication as a draft.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00231 Published 2023-02-28 No fix listed CWE-352

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0